THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

tshark udp conversation command

I am running: tshark -r file.pcap -q -z conv,udp. However, I get repeated conversations between some ip address pairs(send/response), same port pair. Can someone test the udp command and tell me what you get. If you know of a better way please let me know.

rvelez3@fau.edu's avatar
1
[email protected]
asked 2019-04-07 17:54:51 +0000
grahamb's avatar
23.8k
grahamb
updated 2019-04-07 18:31:48 +0000
edit flag offensive 0 remove flag close merge delete

Comments

Works for me. You'll need to share a link to the capture that causes the issue for you. Upload the capture to a public file share, e.g. Google Drive, DropBox etc. and paste a link to the file in your question or as a comment.

grahamb's avatar grahamb (2019-04-07 19:31:36 +0000) edit
more
  • delete
add a comment see more comments

1 Answer

0

I realized that the ip addresses differ slightly; so they are not repeated.

rvelez3@fau.edu's avatar
1
[email protected]
answered 2019-04-07 21:04:40 +0000
edit flag offensive 0 remove flag delete link
more

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer